# Vulnerabilities published in 2026


- [CVE-2026-8582](https://insights.sbomify.com/CVE-2026-8582/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-85818](https://insights.sbomify.com/CVE-2026-85818/): Windows Schannel Spoofing Vulnerability (critical 9.0)
- [CVE-2026-85817](https://insights.sbomify.com/CVE-2026-85817/): Microsoft PowerShell Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-85816](https://insights.sbomify.com/CVE-2026-85816/): Windows Wi-Fi Driver Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-85815](https://insights.sbomify.com/CVE-2026-85815/): Windows Device Association Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85814](https://insights.sbomify.com/CVE-2026-85814/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-85812](https://insights.sbomify.com/CVE-2026-85812/): Windows Bind Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85811](https://insights.sbomify.com/CVE-2026-85811/): Network Policy Server (NPS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-85810](https://insights.sbomify.com/CVE-2026-85810/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-8581](https://insights.sbomify.com/CVE-2026-8581/): Use after free in Chrome (high 8.8)
- [CVE-2026-85809](https://insights.sbomify.com/CVE-2026-85809/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-85808](https://insights.sbomify.com/CVE-2026-85808/): Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability (high 7.5)
- [CVE-2026-85807](https://insights.sbomify.com/CVE-2026-85807/): Windows USB Video Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85806](https://insights.sbomify.com/CVE-2026-85806/): Network Policy Server (NPS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-85805](https://insights.sbomify.com/CVE-2026-85805/): Microsoft PowerShell Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2026-85804](https://insights.sbomify.com/CVE-2026-85804/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85803](https://insights.sbomify.com/CVE-2026-85803/): Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85802](https://insights.sbomify.com/CVE-2026-85802/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85800](https://insights.sbomify.com/CVE-2026-85800/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-8580](https://insights.sbomify.com/CVE-2026-8580/): Use after free in Chrome (critical 9.6)
- [CVE-2026-85799](https://insights.sbomify.com/CVE-2026-85799/): Network Policy Server (NPS) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-85798](https://insights.sbomify.com/CVE-2026-85798/): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-85797](https://insights.sbomify.com/CVE-2026-85797/): Windows GDI Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-85796](https://insights.sbomify.com/CVE-2026-85796/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85795](https://insights.sbomify.com/CVE-2026-85795/): Windows Text Services Framework Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85794](https://insights.sbomify.com/CVE-2026-85794/): Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85793](https://insights.sbomify.com/CVE-2026-85793/): Windows Sysmain Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85792](https://insights.sbomify.com/CVE-2026-85792/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-85791](https://insights.sbomify.com/CVE-2026-85791/): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85790](https://insights.sbomify.com/CVE-2026-85790/): Microsoft QUIC Information Disclosure Vulnerability (medium 5.9)
- [CVE-2026-8579](https://insights.sbomify.com/CVE-2026-8579/): Memory corruption in Chrome (low 3.1)
- [CVE-2026-85788](https://insights.sbomify.com/CVE-2026-85788/): Incomplete list of disallowed inputs in awslabs mysql-mcp-server (medium 5.7)
- [CVE-2026-85787](https://insights.sbomify.com/CVE-2026-85787/): An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server (high 7.1)
- [CVE-2026-85786](https://insights.sbomify.com/CVE-2026-85786/): Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java (high 8.7)
- [CVE-2026-85783](https://insights.sbomify.com/CVE-2026-85783/): Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar m (not scored)
- [CVE-2026-85781](https://insights.sbomify.com/CVE-2026-85781/): Unverified access point ownership in Amazon EFS CSI Driver (medium 5.1)
- [CVE-2026-8578](https://insights.sbomify.com/CVE-2026-8578/): Memory corruption in Chrome (low 3.1)
- [CVE-2026-8577](https://insights.sbomify.com/CVE-2026-8577/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-85769](https://insights.sbomify.com/CVE-2026-85769/): Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize (medium 6.5)
- [CVE-2026-8576](https://insights.sbomify.com/CVE-2026-8576/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-85756](https://insights.sbomify.com/CVE-2026-85756/): SSH.NET: ScpClient allows server-side RCE via default SCP path handling (high 7.5)
- [CVE-2026-85751](https://insights.sbomify.com/CVE-2026-85751/): Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust (critical 9.8)
- [CVE-2026-85750](https://insights.sbomify.com/CVE-2026-85750/): Piwigo arbitrary file read and remote code execution via insecure image processing (high 7.2)
- [CVE-2026-8575](https://insights.sbomify.com/CVE-2026-8575/): Use after free in Chrome (high 8.3)
- [CVE-2026-85749](https://insights.sbomify.com/CVE-2026-85749/): MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail (high 8.1)
- [CVE-2026-85748](https://insights.sbomify.com/CVE-2026-85748/): MariaDB: Use-after-free with a large number of SYS_REFCURSOR's (critical 9.9)
- [CVE-2026-85747](https://insights.sbomify.com/CVE-2026-85747/): Distribution: Client `manifests.Get()` does not verify returned content against requested digest (medium 6.8)
- [CVE-2026-85746](https://insights.sbomify.com/CVE-2026-85746/): MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections (critical 9.9)
- [CVE-2026-85745](https://insights.sbomify.com/CVE-2026-85745/): MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. (medium 4.3)
- [CVE-2026-85740](https://insights.sbomify.com/CVE-2026-85740/): lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard (high 7.1)
- [CVE-2026-8574](https://insights.sbomify.com/CVE-2026-8574/): Use after free in Chrome (high 8.3)
- [CVE-2026-85738](https://insights.sbomify.com/CVE-2026-85738/): TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4) (medium 6.3)
- [CVE-2026-85734](https://insights.sbomify.com/CVE-2026-85734/): LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks (critical 9.1)
- [CVE-2026-85733](https://insights.sbomify.com/CVE-2026-85733/): FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking environment variables (medium 5.3)
- [CVE-2026-85732](https://insights.sbomify.com/CVE-2026-85732/): oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing (medium 4.7)
- [CVE-2026-85731](https://insights.sbomify.com/CVE-2026-85731/): oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir) (high 8.8)
- [CVE-2026-85730](https://insights.sbomify.com/CVE-2026-85730/): smol-toml: Denial of Service via malformed TOML documents (high 8.2)
- [CVE-2026-8573](https://insights.sbomify.com/CVE-2026-8573/): Integer overflow in Chrome (high 8.3)
- [CVE-2026-85725](https://insights.sbomify.com/CVE-2026-85725/): LightRAG: Plaintext Passwords Compared Without Constant-Time Function (medium 5.9)
- [CVE-2026-85724](https://insights.sbomify.com/CVE-2026-85724/): Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass (critical 9.6)
- [CVE-2026-85721](https://insights.sbomify.com/CVE-2026-85721/): AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service (high 7.5)
- [CVE-2026-85720](https://insights.sbomify.com/CVE-2026-85720/): AsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT request (medium 5.9)
- [CVE-2026-8572](https://insights.sbomify.com/CVE-2026-8572/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-85719](https://insights.sbomify.com/CVE-2026-85719/): AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP (high 7.5)
- [CVE-2026-85718](https://insights.sbomify.com/CVE-2026-85718/): AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of service (medium 5.9)
- [CVE-2026-85717](https://insights.sbomify.com/CVE-2026-85717/): AsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect target (medium 6.8)
- [CVE-2026-85716](https://insights.sbomify.com/CVE-2026-85716/): AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified (low 3.7)
- [CVE-2026-85715](https://insights.sbomify.com/CVE-2026-85715/): ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion (high 7.5)
- [CVE-2026-85714](https://insights.sbomify.com/CVE-2026-85714/): Stirling-PDF: Remote Code Execution via H2 (critical 9.1)
- [CVE-2026-8571](https://insights.sbomify.com/CVE-2026-8571/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-85709](https://insights.sbomify.com/CVE-2026-85709/): LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses (medium 5.3)
- [CVE-2026-85706](https://insights.sbomify.com/CVE-2026-85706/): GitLab Community Edition and Enterprise Edition Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2026-85705](https://insights.sbomify.com/CVE-2026-85705/): Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters (high 7.5)
- [CVE-2026-85704](https://insights.sbomify.com/CVE-2026-85704/): ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition (medium 6.3)
- [CVE-2026-85703](https://insights.sbomify.com/CVE-2026-85703/): ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources (medium 6.9)
- [CVE-2026-85702](https://insights.sbomify.com/CVE-2026-85702/): ramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication (medium 6.9)
- [CVE-2026-85701](https://insights.sbomify.com/CVE-2026-85701/): ramon-victor freegpt-webui Authentication Check __init__.py ChatCompletion.create missing authentication (medium 6.9)
- [CVE-2026-85700](https://insights.sbomify.com/CVE-2026-85700/): Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints (high 7.1)
- [CVE-2026-8570](https://insights.sbomify.com/CVE-2026-8570/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-85699](https://insights.sbomify.com/CVE-2026-85699/): jina-ai reader server-side request forgery via redirect validation bypass (high 8.7)
- [CVE-2026-85698](https://insights.sbomify.com/CVE-2026-85698/): Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service (medium 6.8)
- [CVE-2026-85697](https://insights.sbomify.com/CVE-2026-85697/): Documenso 2.17.0 PDF Route Ignores Document Visibility (high 7.1)
- [CVE-2026-85696](https://insights.sbomify.com/CVE-2026-85696/): SadTalker OS Command Injection via Audio Filename (critical 9.3)
- [CVE-2026-85695](https://insights.sbomify.com/CVE-2026-85695/): FastChat Unauthenticated Worker Registration SSRF and Model Spoofing (critical 9.3)
- [CVE-2026-85694](https://insights.sbomify.com/CVE-2026-85694/): LaVague 0.2.35 Remote Code Execution via eval extraction (critical 9.2)
- [CVE-2026-85693](https://insights.sbomify.com/CVE-2026-85693/): Chatbot UI Cross-User Private File Content Disclosure via Retrieval API (high 7.1)
- [CVE-2026-85692](https://insights.sbomify.com/CVE-2026-85692/): Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding (high 7.1)
- [CVE-2026-85691](https://insights.sbomify.com/CVE-2026-85691/): MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url (high 8.7)
- [CVE-2026-85690](https://insights.sbomify.com/CVE-2026-85690/): Plandex 2.2.1 Path Traversal via ApplyFiles (high 8.5)
- [CVE-2026-8569](https://insights.sbomify.com/CVE-2026-8569/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-85689](https://insights.sbomify.com/CVE-2026-85689/): llmware 0.4.6 SQL Injection via unescaped filter values (high 7.1)
- [CVE-2026-85688](https://insights.sbomify.com/CVE-2026-85688/): TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer (critical 9.3)
- [CVE-2026-85687](https://insights.sbomify.com/CVE-2026-85687/): surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server (high 8.7)
- [CVE-2026-85686](https://insights.sbomify.com/CVE-2026-85686/): ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs (high 8.7)
- [CVE-2026-85685](https://insights.sbomify.com/CVE-2026-85685/): AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill (high 8.7)
- [CVE-2026-85684](https://insights.sbomify.com/CVE-2026-85684/): marker through 2.0.0 Path Traversal via upload filename (high 8.8)
- [CVE-2026-85683](https://insights.sbomify.com/CVE-2026-85683/): Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Store Config Proxy URL (high 8.8)
- [CVE-2026-85682](https://insights.sbomify.com/CVE-2026-85682/): Cross-site request forgery in YOP Poll (high 8.8)
- [CVE-2026-85681](https://insights.sbomify.com/CVE-2026-85681/): WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update (critical 9.8)
- [CVE-2026-85680](https://insights.sbomify.com/CVE-2026-85680/): Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/304/